CVE-2024-31841

An issue was discovered in Italtel Embrace 1.6.4. The web server fails to sanitize input data, allowing remote unauthenticated attackers to read arbitrary files on the filesystem.

CVSS v3.1 CNA

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.80% chance of exploitation in the next 30 days, 56th percentile

Published

2024-04-19

Updated

2024-08-02

Proof-of-concept exploits (1)

• https://www.gruppotim.it/it/footer/red-team.html

References

• CVE Record
• NVD entry